Exploiting QuickTime flaws in Second Life

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
Researchers at Independent Security Evaluators, during a presentation at SchmooCon , demonstrated how an attacker could steal money from people in SecondLife thanks to a QuickTime flaw.

Miller and Zovi are both experienced with flaws within Apple products. Miller published the first Apple iPhone flaw shortly after its release. At last year's CanSecWest security conference, Zovi exploited a QuickTime flaw to win a "PWN to Own" hack-a-Mac contest. While Second Life does not install QuickTime, it invites users to install the player if they want to see multimedia files within Second Life.
 
And this children is why we don't use real money in games.

Hopefully that can get patched before anyone loses too much money.
 
Nice.

I am surprised people still play this. A friend convinced me to try it with him about a year ago. I lasted less than 5 minutes and had to uninstall that garbage.
 
From what I read, the problem is in the media player. So use VLC player instead, it plays all formats of video with no codec downloads:
http://www.download.com/VLC-Media-Player/3000-13632_4-10267151.html

By the way, I can't understand why anyone plays this either. :confused:

I dislike open source software but VLC Player is one of the few opensource programs I do use simply because of the "stay on top" feature lets me browse 4chan at full screen while watching...movies.
 
I use MPC with open-source codecs for quicktime and realplayer, much faster, no bloat, no spyware, no adware.;)
 
Back
Top